From the course: Ethical Hacking: Introduction to Ethical Hacking

Unlock the full course today

Join today to access over 23,200 courses taught by industry experts.

Managing risks

Managing risks

- [Instructor] Risk is a function of a threat exploiting a vulnerability. In this segment, we'll learn how decreasing vulnerabilities can decrease overall risk. First, let's review the concept of risk. Risk is when a person, place or thing is open or exposed to harm, injury or other negative outcome. Risk includes business disruption, financial loss or even loss of life. When managing risk, the analyst uses a formula as follows, risk equals threat times vulnerability. So let's talk about the concept of a threat versus a vulnerability. A threat is anything that can exploit a vulnerability, intentionally or accidentally, and obtain damage or destroy an asset. A threat can include an innocent mistake made by an employee, a natural disaster or a ransomware attack. The key is that threats in general are difficult to control. A vulnerability is a security flaw or weakness in a system that can be exploited by threats to gain…

Contents